Tax season is when attackers get busy too.
Threats
What attackers go after
Tax Data Theft
Criminals target accounting firms for tax returns, W-2s, and Social Security numbers. Stolen data enables fraudulent tax refunds and long-term identity theft.
Business Email Compromise
Attackers impersonate CPAs to redirect client payments and request sensitive documents. During tax season, the high volume of financial communications creates cover for fraud.
Ransomware During Tax Season
Ransomware attacks timed to tax deadlines create maximum pressure. Firms face impossible choices between paying ransoms and missing filing deadlines.
Compliance
The frameworks you answer to
The IRS requires all tax preparers to implement security safeguards. Failure to protect client data can result in penalties, loss of PTIN eligibility, and malpractice liability.
IRS Publication 4557
- Written information security plan required
- Employee background checks
- Data encryption requirements
- Secure disposal of client documents
GLBA Safeguards Rule
- Applies to tax preparers as financial institutions
- Risk assessment requirements
- Access controls and monitoring
- Incident response planning
Virtus helps accounting firms implement security programs that satisfy IRS requirements, protect client data, and reduce liability exposure.
How we help
Where we would start
Security Assessments
Evaluate your firm's compliance with IRS Publication 4557 and GLBA requirements. Identify gaps in your written security plan and client data protections.
Penetration Testing
Test defenses protecting tax returns, client portals, and practice management systems. Identify vulnerabilities before tax season attackers exploit them.
Managed Security
24/7 monitoring for accounting firm networks. Detect data exfiltration, unauthorized access, and threats targeting client financial information.
Security Training
Train staff to recognize phishing, BEC, and social engineering targeting accounting firms. Reduce the human errors that lead to client data breaches.
Case study
In a client's words
“After learning about the IRS 4557 security requirements, we realized we needed professional help. Virtus worked closely with us to write a security plan and implement the technical controls we were missing.”
- IRS 4557 compliance
- Full
- cyber liability insurance audit
- Passed
Get your security plan in order before tax season.
Assessments against IRS Publication 4557 and the GLBA Safeguards Rule, plus training for staff who handle client documents.